feat(core): google one tap

[gao-sun]

the Google One Tap series:

• feat(connector): google one tap #6030
• feat(core): google one tap #6031 ⬅️
• feat(experience): google one tap #6032
• feat(console): google one tap #6034

Summary

reorg sign-in experience types, validate csrf token, and allow gsi origin in security headers.

this is essential for google one tap support (tested the sign-in flow in later pulls)

Testing

unit tests added

Checklist

• .changeset
• unit tests
• integration tests
• necessary TSDoc comments

[github-actions]

COMPARE TO master

Total Size Diff 📈 +5.8 KB

Diff by File

Name	Diff
.changeset/cyan-garlics-tan.md	📈 +449 Bytes
packages/core/src/mocks/connector.ts	📈 +32 Bytes
packages/core/src/libraries/sign-in-experience/index.test.ts	📈 +1.51 KB
packages/core/src/libraries/sign-in-experience/index.ts	📈 +874 Bytes
packages/core/src/libraries/sign-in-experience/types.ts	📈 +959 Bytes
packages/core/src/libraries/social.ts	📈 +20 Bytes
packages/core/src/middleware/koa-security-headers.ts	📈 +210 Bytes
packages/core/src/routes/interaction/index.ts	📈 +3 Bytes
packages/core/src/routes/interaction/utils/social-verification.test.ts	📈 +1.15 KB
packages/core/src/routes/interaction/utils/social-verification.ts	📈 +453 Bytes
packages/core/src/routes/well-known.test.ts	📈 +181 Bytes
packages/core/src/routes/well-known.ts	📈 +61 Bytes
packages/phrases/src/locales/en/errors/session.ts	📈 +47 Bytes
packages/schemas/src/types/index.ts	📈 +41 Bytes
packages/schemas/src/types/sign-in-experience.ts	📈 +1.99 KB